Skills
Navigate
skills/albertmartorell1975/android-ai-workflow-foundation/android-cli/Gen Agent Trust Hub

android-cli

Fail

Audited by Gen Agent Trust Hub on Aug 10, 2026

Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill facilitates downloading and running installation scripts from official Google servers (dl.google.com) for multiple operating systems.
  • [REMOTE_CODE_EXECUTION]: The android update command supports a --url parameter, enabling the tool to download and execute software updates from arbitrary locations.
  • [REMOTE_CODE_EXECUTION]: The android skills add command allows for the installation of additional agent logic from external sources.
  • [PROMPT_INJECTION]: The skill's metadata claims the author is 'Google LLC', which is misleading and potentially deceptive regarding the skill's provenance.
  • [PROMPT_INJECTION]: The skill processes XML 'journey' files containing instructions that the agent is told to follow 'EXACTLY as written'. Ingestion points: journey XML files in references/journeys.md. Boundary markers: Absent (XML is treated as source of truth). Capability inventory: adb shell input, project creation, and environment initialization. Sanitization: Absent.
Recommendations
  • HIGH: Downloads and executes remote code from: https://dl.google.com/android/cli/latest/linux_x86_64/install.sh, https://dl.google.com/android/cli/latest/darwin_arm64/install.sh, https://dl.google.com/android/cli/latest/darwin_x86_64/install.sh - DO NOT USE without thorough review
Audit Metadata
Risk Level
HIGH
Analyzed
Aug 10, 2026, 03:18 PM
Security Audit — agent-trust-hub — android-cli